Method and apparatus for determining automatic scanning action

Abstract

Disclosed are a method and an apparatus for determining an automatic scanning action. The method comprises: in a set period, collecting access request messages sent from a selected send end to a selected network server and access response messages returned from the selected network server to the selected sending end; equally dividing the set period into at least two set sub-periods, successively counting the number of the access request messages in each set sub-periods and determining a request credible value of the selected sending end; counting the number of response success messages and the number of response failure messages in the collected access response messages, and determining a request credible value of the selected sending end; calculating a general accessed value of the selected send end in the set period according to the determined request credible value, the response credible value, first weight, and second weight; and comparing the general accessed value with a first set threshold, and determining whether is the selected sending end performs automatic scanning This solution is more applicable and more accurate than the prior art.